Encrypt a plaintext message with AES (Advanced Encryption Standard) using a passphrase-based CryptoJS OpenSSL-compatible format. AES is a widely deployed block cipher; this tool produces a Base64 ciphertext string you can store or send, then decrypt later with the same secret.
Algorithm
The passphrase derives key material in the CryptoJS OpenSSL KDF style; AES encrypts the UTF-8 message and packages the result as a Base64 blob typically prefixed with Salted__ when decoded. Output is ciphertext only—anyone without the passphrase should not recover the plaintext. Encryption runs entirely in the browser.
When to use it
- Protect short notes or tokens before pasting into tickets or chat
- Demo AES passphrase encryption compatible with CryptoJS/OpenSSL salted messages
- Round-trip testing with the matching AES decrypt tool
Limitations
Passphrase strength dominates security; short or reused secrets are weak. This is not a full application crypto protocol (no authenticated associated data UI, no key rotation). Ciphertext grows relative to plaintext. Do not treat AES alone as a substitute for TLS in transit. Browser memory retains secrets while the tab is open.
Example
Plaintext Secret message with passphrase passphrase encrypts to a Base64 string beginning like U2FsdGVkX1… (exact bytes vary because of random salt). Decrypting that blob with the same passphrase recovers Secret message.